KR101045490B1 - Broadcast conditional access system with impulse purchase capability in a two way network - Google Patents

Abstract

The present invention relates generally to an apparatus and method for securing an impulse purchase program from a network broadcast system of conditional access. The present invention includes providing an entitlement code to a set top box having a security module disposed in a customer's corresponding program viewing system. A customer who wants to buy an impulse communicates the request to a broadcast system. In one embodiment of the invention, a message from a customer's access device is sent to the headend of the broadcast system to indicate the desired purchase. In response to receiving the impulse purchase signal, the headend generates and transmits an authorization code, which authenticates the set-top box to decode the impulse purchased program when the impulse purchased program is received. The authorization code for a given impulse purchase program is only sent to the set top box that actually purchases the program, compared to conventional systems where the decryption code for impulse purchase is preloaded into the security module before the event is purchased. The present invention also generates the necessary data regarding the billing record and transmits this data to the billing center.

Security Modules, Set Top Boxes, Headends, Access Devices, Impulse Buying Programs

Description

Conditional Access Broadcasting System with Impulse Purchasing Performance in Two-Way Networks {BROADCAST CONDITIONAL ACCESS SYSTEM WITH IMPULSE PURCHASE CAPABILITY IN A TWO WAY NETWORK}

The present invention relates generally to a method and apparatus for a Multi-channel Video Programming Distributor (MVDP) system that provides conditional access multimedia programming.

The subscriber broadcast system partially includes a headend on which the service provider program is broadcast, and ultimately a set top box for receiving the program selected for viewing the program. Typically, when an event is broadcast, the broadcast program is watched on a monthly subscription, pay-per-view, and in some cases, on an impulse purchase, an impulse purchase that almost determines whether the customer will see the program at the time the program is broadcast. It is. Current impulse purchase systems store access keys in a security module that is placed in a set-top box that can decode all of the services the customer may want to purchase prior to purchase. When a customer makes a purchase, the security module stores the purchase record and often allows the customer to view the requested program using the keys already obtained at the beginning of the monthly subscription. Thereafter, the security module creates a two-way communication channel with the charging center and sends the charging information back to the service provider.

The prior art shown in FIG. 1 shows a typical access system using a headend and a set top box. U. S. Patent No. 6,510, 519 also describes a general conditional access system. Set-top boxes generally include tuners, demodulators, decoders, transport demultiplexers, microprocessors, program memories, video picture memories, MPEG video decoders, displays, and smart cards. Data streams of most digital broadcast systems are encoded or scrambled for security. The subscriber receives a entitlement control message that includes a control word that the set-top box needs to decrypt to form a descrambling key that allows the encoded audio and video signal to be assembled for consumption. The decryption control word is processed by an algorithm programmed into the customer's set top box. Typically, 56-bit decryption keys are stored in transport registers for further data decryption and decryption. When decoding occurs, the system generally constructs a video composite picture in memory according to the MPEG-2 standard and displays a desired picture on a display. In general, in addition to decryption of the program, additional authentication is provided to ensure that a particular set top box has received one program or a set of programs.

Viewing authorization for a given program may be sent to the set top box with the program or over a separate communication channel, for example as an out-of-band RF link. For example, the authentication information may include a key regarding the service and an indication of the program type of the service that the subscriber can watch. If the authentication information indicates that the subscriber is authorized to view the program, the control word generator generates a control word using the decryption key along with the transmitted information.

When a subscription purchase for programming occurs, the service provider sends an authentication code to the set-top box belonging to the subscriber to perform the necessary subsequent decryption. This data constituting the authentication information is stored in the security module.

Various techniques are used to scramble program content and associated entitlement management messages. However, existing broadcast systems do not rely on interactive communication channels from customer equipment, typically set-top boxes, to broadcast headends with respect to impulse purchase authorization codes. This lack of two-way communication exposes a weakness that gives hackers the opportunity to steal the program. Current impulse purchase systems store decryption keys in the security module of the customer's set top box that subsequently decode the service the customer may potentially purchase. If the customer purchases one of the purchases pre-programmed in the security module, the security module typically stores the purchase record and allows the customer to view the object purchased by the decryption key already owned. Later, the security module may be configured to create a two-way communication channel with the charging center to send the charging information back to the service provider. If a hacker can switch signals from the security module and decode the decryption key, the hacker can potentially obtain programs and other services at no cost. Also, if a hacker purchases a program, but can clear the purchase record before the purchase record is sent to the charging point, the user can also avoid paying the cost.

Summary of the Invention

The security network includes an entitlement management message (EMM) generator disposed at the headend, and the EMM generator is used to provide program code to the distribution of the set top box where the security module and its associated customer's voice and viewing system are located. When a customer makes an impulse purchase, the customer communicates his or her choice to the set top box in the preferred embodiment so that a message is sent to the headend indicating the desired purchase. In response to receiving the impulse purchase signal, the headend generates a message, such as an EMM, that transmits a decryption code, which authenticates the set top box to decode the impulse purchased program when the impulse purchased program is received. In accordance with the order in which they are placed, the headend also generates a billing record and sends the billing record to the billing center. The authorization code for a given impulse purchase program is only sent to the set top box that actually purchases the program, compared to conventional systems where the authorization code for impulse purchase is preloaded into the security module before the event is purchased.

The invention disclosed herein includes means for receiving an impulse program, means for indicating a desired impulse purchase, means for communicating a desired impulse purchase, means for receiving authentication for a message indicating an impulse purchase, and a purchased program And means for storing an authentication code specific to. The present invention also generates the necessary data regarding the billing record and transmits this data to the billing center.

The invention disclosed herein is a headend for controlling impulse purchases using means for receiving a program and for transmitting and receiving data used for the preparation of a program via a credential management message from a security means disposed in the means for receiving the program. Sending a message indicative of the desired purchase, generating a billing record, addressing a decryption means specific to the purchased program, and finally sending the decryption means to a device on which the security module is located; A method comprising providing the impulse buyer with security means for purchasing the program, including the step.

1 is a block diagram of a conditional access system of the prior art.

2 is a block diagram of the present invention for securing an impulse buying program.

3 illustrates a method of securing an impulse buying program.

The invention will be best understood from the following detailed description when taken in conjunction with the accompanying drawings. Various features of the figures are not exhaustive. In contrast, various features may be arbitrarily expanded or reduced for clarity.

The prior art shown in FIG. 1 shows an overview of a service provider 105 system that provides multimedia programming. Data streams of most digital broadcast systems are encrypted or scrambled for security purposes, ie only authorized subscribers can see the transmission program.

In a subscriber-based digital broadcast system, a customer receives an entitlement management message (EMM) containing information necessary to generate the control words necessary to permit decoding and assembling of digital video and audio data. The decryption control word is processed by an algorithm programmed into the set top box 115 (typically a smart card) that generates an N-bit decryption key. Current systems typically use 56-bit sized keys. The 56-bit key is then stored in the transport register for further data decryption of the program. When decoding occurs, the system generally constructs a video composite picture in memory according to the MPEG-2 standard, and displays the desired picture on the display.

Encoding of the digital broadcast system is accomplished by sending and receiving entitlement control words 116 as packets containing decryption details in the form of input data. When a service provider broadcasts a program, the service provider scrambles the program content 111.

The set top box 115 determines whether the scrambled program 111 should be decrypted. If it is determined that the program is a program purchased by the customer based on the authentication code, the set-top box 115 decrypts the program for viewing. The set top box 115 includes a decoder 117 that decrypts the scrambled program 111 using the control word 119 as a key. The control word 119 is generated by the control word generator 131 from the information included in the entitlement control message 109 and the information of the authentication information 123 stored in the set top box 115.

For example, the authentication information 123 may include a key for the service and an indication of the program type of the service that the subscriber is authorized to view. If the authentication information 123 indicates that the subscriber is authorized to view the scrambled program 111, the control word generator 131 generates the control word 119 using the decryption key along with the information from the ECM 109. . A new control word 119 is created for each new ECM 109.

Authentication information used in a particular set top box 115 is obtained from one or more EMM 113 addressed to the set top box 115. When a purchase for a program occurs, the service provider sends the EMM 113 for the required decryption authentication 123 to the set top box 115 belonging to the subscriber. In addition, the entitlement management message (EMM) 113 is transmitted in a form that can be interleaved with the program 111 or the entitlement management message (EMM: 113) to the security module 133 including the authentication information 123. May be transmitted to the set-top box 115 via a separate channel 127 that stores information from.

Referring to FIG. 2, the invention disclosed herein includes means for receiving a program 215, means 240 for indicating a desired impulse purchase, means 245 for communicating a desired impulse purchase, and a desired impulse purchase. And access means (213) for transmitting a code to the set-top box to permit viewing. The system may also include means 238 for generating billing record data and may transmit such data to billing record generating means 260.

More specifically, when a service provider broadcasts a program, the service provider scrambles the content 211. The set top box provides a means for receiving, decoding, and supplying a digital signal that can be viewed by a customer, including transmission of an impulse purchase, including its receipt in scrambled form. Specifically, the scrambled program content 211 includes video and audio data as well as various control messages such as the ECM 209. The entitlement control message 209 includes a control word 216 that serves as decryption code such that the scrambled portion of the program 211 to which the message belongs is decoded in a manner visible to the customer upon receipt and then assembled. .

The set top box 215 decodes the protected digital data stream 229 containing the broadcast program as described below. The set top box 215 determines whether the scrambled program 211 should be decrypted. If it is determined that the program is a program purchased by the customer based on the authentication code, the set-top box 215 decrypts the program so that it can be viewed. The set top box 215 includes a decoder 217 that decrypts the scrambled program 211 using the control word 219 as a key. The control word 219 is generated by the control word generator 231 from the information included in the entitlement control message 209 and the information of the authentication information 223 stored in the set top box 215.

The scrambled data associated with the control word 216 and the ECM 209 then generate a control word 216 representing an N-bit decryption key to decode the transmitted digital data (generally a smart inserted into the receiver). By the receiver 215).

As shown in the prior art description, the authentication information 223 may include a key for the service and an indication of the type of program in the service that the subscriber is authorized to view. If the authentication information 223 indicates that the subscriber is authorized to view the program of the scrambled program 211, the control word generator 231 uses the decryption key together with the information from the ECM 209 to retrieve the control word 219. Create The invention differs from the prior art in that the authentication information is not preloaded into the set top box 215 but relies on the response means 245 for communicating the request for the desired impulse purchase and the desired impulse purchase.

In the prior art, authentication information is transmitted long ("preload") prior to any selected impulse program. In the invention disclosed herein, upon communication of the desired impulse purchase 240, such as communicating via the transmitting means 245 and the receiving means 250, the headend is secured in which the authentication information is stored in the memory 223. Respond by sending authentication information 227 to module 233. One means of communicating the authentication information 227 is transmitted in an interleaved form with the program 211, or alternatively, using an out-of-band frequency or a communication network to the set-top box 215, for example, the entitlement management message ( EMM 213 is through the EMM 213, which may be transmitted over a separate channel 227 that stores information from the security module 233 in the memory 223.

The apparatus for communicating and receiving programming disclosed herein includes means 260 for generating a charging record. In addition, the bill is ultimately sent to the charging center 270 via a two way communication channel.

Referring to FIG. 3, a method of providing an impulse purchaser with security means for purchasing a program includes selecting a desired impulse buying program (301), communicating a selection of the desired impulse buying program to a service provider (310), Responding to the desired impulse purchase program (320) by transmitting the impulse buying program and codes uniquely associated with a given receiver (320), storing the code associated with the desired impulse buying program in a secure module (330) and associated with the code stored in the secure module If it transmits a program with an entitlement code (340), decodes the entitlement code (350), and the entitlement code does not match the code stored in the security module to permit viewing the program (360), it is determined that viewing is not authorized. Display (380), decode and assemble the program image for viewing if the qualification code is comparable It said unit 370, and includes one (390) for displaying the image.

It is to be understood that the form of the invention shown is only for the preferred embodiment. In addition, various modifications may be made to the function and arrangement of components, and equivalent elements may be replaced by equivalent means, without departing from the spirit and scope of the invention as defined in the following claims, Certain features may be used independently of the remaining features.

Claims (13)

As an access device, Means for sending an impulse purchase selection to the service provider using an out-of-band frequency different from the content providing frequencies; Means for receiving an authentication key sent by the service provider in response to the impulse purchase selection, wherein the authentication key is not stored in the access device prior to the impulse purchase selection; Means for receiving a program associated with the impulse purchase selection; Means for processing the received program using the authentication key; Means for generating a charging record in response to receiving the authentication key Including, And the access device sends the charging record to the service provider. As an access device, Means for indicating a desired impulse purchase choice using an out-of-band frequency different from the content providing frequencies; Means for sending the desired impulse purchase choice to a service provider; Means for receiving an authentication key specified in the desired impulse purchase selection and sent to the access device, wherein the authentication key is not stored in the access device prior to the impulse purchase selection; Means for receiving a transmission of a desired program associated with the impulse purchase selection; Means for processing the received program using the authentication key; Means for generating a charging record in response to receiving the authentication key Including, And the access device sends the charging record to the service provider. delete The method of claim 2, Means for receiving the authentication key receives the authentication key via an out-of-band frequency. The method of claim 2, And the means for transmitting the desired impulse purchase utilizes a two-way communication interface. The method of claim 5, The charging record sent to the service provider is transmitted via the two way communication interface. As an access device, A tuning and communication unit for transmitting the impulse purchase message using an out-of-band frequency different from the content providing frequencies and for receiving an authentication key transmitted in response to the impulse purchase message and associated with the impulse purchase program; The authentication key is not stored in the access device prior to transmission; A controller and decoder unit for formatting the digital program into an image display in response to the authentication key; A charging generator for generating a charging record in response to receiving the authentication key Including, And the access device sends the charging record to the same location as the impulse purchase message. As a method of providing security means for purchasing an impulse buying program, Sending a message to the service provider means indicating an impulse purchase selection using an out-of-band frequency different from the content providing frequencies; Receiving, at the receiver, authentication information specific to the impulse buying program transmitted in response to the transmitted message, wherein the authentication information is not stored at the receiver prior to the impulse buying selection; Receiving the impulse purchase program at a receiver; Processing the impulse buying program in response to the authentication information; Generating a charging record at the receiver in response to receiving the authentication key and transmitting the charging record from the receiver to the service provider means Security means providing method comprising a. delete The method of claim 8, The receiving step comprises receiving the authentication via an out-of-band frequency. The method of claim 8, And said transmitting step comprises transmitting said message via a two-way communication interface. The method of claim 8, The charging record is transmitted to the service provider means via a two-way communication interface. As a method of providing security means for purchasing an impulse buying program, Selecting the desired impulse buying program, Transmitting the selection of the desired impulse buying program from an access device to a service provider using an out-of-band frequency different from the content providing frequencies; Responding to the selection of the transmitted impulse purchase program by transmitting to the access device an authentication code uniquely associated with the desired impulse purchase program, wherein the authentication code is stored in the access device prior to selection of the impulse purchase program; None-, Storing the authentication code associated with the desired impulse buying program in a security module in the access device; Transmitting an impulse purchase program having an entitlement code associated with an authentication code stored in the security module to the access device; Decoding the entitlement code; Comparing the entitlement code with a code stored in the security module to permit viewing the impulse buying program; Generating a charging record at the access device in response to receiving the authentication key and transmitting the charging record from the access device to the service provider Security means providing method comprising a.

Images